Enabling dcc checking

[Rose, Bobby]

I've been using dcc with SA since it was added without any problems.
The score of 0.0 turns it off so just give it a score. You also have to
set the DCC thresholds in SA, example

dcc_body_max                    20
dcc_fuz1_max                    30
dcc_fuz2_max                    30

 Note that DCC must be installed and you should probably setup it's
whitelists as well.  DCC is similar to razor but is intended to reduce
bulk mailings.  It records every time a message has been seen and you
can set threshold levels to reject the message if using the sendmail
milter or tagged by SA.  So if the fuz2 hash of this message was seen 30
times and that was the threshold then it's tagged.  When you report in
SA or DCC, you are explicitly telling the DCC server that the message
has been seen "many" times so each of the hashes are for that message is
set to many.

The whitelisting in DCC is very important because you can generate false
positives for mailing lists and internal bulk mailings.  I've been using
the milter to block the many's and have SA tag anything else with a
different threshold.  I also use SA to do the reporting so that it's
reported to both Razor and DCC.  I know DCC is more for bulk mailings
but I consider spam to bulk mailing.  DCC's algorithms are better than
Razorv1 because of the fuzzy hashes but Razorv2 is better than DCC, but
still lacks a good milter.

-----Original Message-----
From: Gerry Doris [mailto:gerry at dorfam.ca] 
Sent: Wednesday, July 03, 2002 8:31 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Enabling dcc checking


> At 06:42 03/07/2002, you wrote:
>>I've installed the dcc checking option for spamassassin and using SA's

>>test (spamassassin -t < sample-spam.txt > spam) I can see that SA has

>>used the dcc checking code.  I sent the same sample file to myself and

>>it didn't mention dcc checking.
>>
>>I have never seen dcc checking happen when calling SA using  
>>mailscanner. I checked and I have the "score DCC_Checking 0.0" line  
>>commented out in spam.assassin.prefs.conf.  Is there something else  
>>that I should have done?
>
> If you start MailScanner from an open window (via check_mailscanner) 
> do you get any "command not found" errors? If not, then it's running 
> dcc. I haven't tried dcc yet myself, so I'm not quite sure why this is

> happening.
>
> I'll have to install DCC and see what happens.
> --
> Julian Field                Teaching Systems Manager

I ran check_mailscanner and received just a simply one line reply that
mailscanner's pid was xxxxx (I forget the exact number).  There was no
other command not found type of complaint.  Perhaps dcc is working but
I've never noticed any indication that it is.

Gerry